IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
8.3High

CVE-2022-25602WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability

ExpressTech Responsive Menu (WordPress plugin) Published: (4 years ago)

Description

Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).

Weakness (CWE): CWE-200

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
ExpressTech Responsive Menu (WordPress plugin) <= 4.1.7 – ≤ 4.1.7

References and patches

Recent CVEs in the same product — WordPress plugins & themes